Information Security Manager - New York

5 Days ago • 5 Years +

About the job

Summary_{By Outscal}

Lead SOC2 audits, develop & implement security policies, conduct risk assessments, and manage security incidents. Strong knowledge of ISO 27001 and NIST frameworks. Experience leading SOC2 audits and compliance with SOC2 standards is essential.

The Role:

We are seeking a highly skilled and experienced Information Security Officer to join our team. The ideal candidate will have a strong background in information security management and extensive experience leading SOC2 audits. This role is critical in ensuring our organization’s compliance with industry standards and protecting our information assets.

Key Responsibilities:

Lead and manage SOC2 audit processes, including planning, execution, and reporting.
Develop, implement, and maintain information security policies, procedures, and controls.
Conduct risk assessments and vulnerability assessments to identify and mitigate security risks.
Monitor and respond to security incidents and breaches, ensuring timely resolution and documentation.
Collaborate with internal and external stakeholders to ensure compliance with regulatory requirements and industry best practices.
Provide training and awareness programs to employees on information security policies and procedures.
Stay current with emerging security trends, threats, and technologies, and recommend enhancements to the security program.
Prepare and present regular reports on the status of the information security program to senior management.

Required Skills, Experience, and Qualifications:

Bachelor’s degree in Information Security, Computer Science, or a related field.
Minimum of 5 years of experience in information security management.
Proven experience leading SOC2 audits and ensuring compliance with SOC2 standards.
Strong knowledge of information security frameworks and standards (e.g., ISO 27001, NIST).
Excellent analytical, problem-solving, and decision-making skills.
Strong communication and interpersonal skills, with the ability to work effectively with diverse teams.
Relevant certifications such as CISSP, CISM, or CISA are highly desirable.

Preferred Skills:

Experience with cloud security and managing security in cloud environments.
Familiarity with data privacy regulations (e.g., GDPR, CCPA).
Experience with security tools and technologies (e.g., SIEM, IDS/IPS, DLP).

About us:

We’re a diverse group of visionary innovators who provide trading and workflow automation software, high-value analytics, and strategic consulting to corporations, central banks, financial institutions, and governments. Founded in 1999, we’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world.

• Over 2,000 of the world’s leading corporations, including 50% of the Fortune 500 and 30% of the world’s central banks, trust ION solutions to manage their cash, in-house banking, commodity supply chain, trading and risk.

• Over 800 of the world’s leading banks and broker-dealers use our electronic trading platforms to operate the world’s financial market infrastructure.

ION is a rapidly expanding and dynamic group with 13,000 employees and offices in more than 40 cities around the globe. Our ever-expanding global footprint, cutting edge products, and over 40,000 customers worldwide provide an unparalleled career experience for those who share our vision.

ION is committed to maintaining a supportive and inclusive environment for people with diverse backgrounds and experiences. We respect the varied identities, abilities, cultures, and traditions of the individuals who comprise our organization and recognize the value that different backgrounds and points of view bring to our business.

ION adheres to an equal employment opportunity policy that prohibits discriminatory practices or harassment against applicants or employees based on any legally impermissible factor.